Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/eb5d0560-9867-31d1-88d6-790880839ff0.roa
File:                     eb5d0560-9867-31d1-88d6-790880839ff0.roa (raw, json)
Hash identifier:          tZ4FOprEShw0XxYB/pgpf4ld9B9sQJTOs753ACDvzxA=
Subject key identifier:   19:18:68:F5:1F:D0:96:5B:ED:94:C7:52:AC:7F:F4:D0:8A:A6:B0:52
Certificate issuer:       /CN=6f57e016-3f00-4230-8751-484573ddf8de
Certificate serial:       010D0C9F43285838AB188E2D97187A43FD88C300
Authority key identifier: B0:4A:AC:B4:CD:17:FC:FC:13:9D:45:27:73:67:CB:82:F6:62:48:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/eb5d0560-9867-31d1-88d6-790880839ff0.roa
Signing time:             Tue 19 Jan 2021 05:00:00 +0000
ROA not before:           Tue 19 Jan 2021 05:00:00 +0000
ROA not after:            Mon 24 Apr 2023 04:00:00 +0000
asID:                     32035
IP address blocks:        66.43.101.0/24 maxlen: 24
                          66.43.92.0/24 maxlen: 24
                          66.43.96.0/23 maxlen: 24
                          66.43.98.0/24 maxlen: 24
                          66.43.105.0/24 maxlen: 24
                          66.43.106.0/24 maxlen: 24
                          66.43.110.0/24 maxlen: 24
                          66.43.112.0/21 maxlen: 24
                          69.28.96.0/19 maxlen: 24
                          69.168.192.0/19 maxlen: 24
                          69.170.160.0/19 maxlen: 24
                          74.85.0.0/19 maxlen: 24
                          207.232.80.0/20 maxlen: 24
                          209.141.64.0/19 maxlen: 24
                          209.141.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ab:18:8e:2d:97:18:7a:43:fd:88:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f57e016-3f00-4230-8751-484573ddf8de
        Validity
            Not Before: Jan 19 05:00:00 2021 GMT
            Not After : Apr 24 04:00:00 2023 GMT
        Subject: CN=cd978427-fe62-4c75-9272-95cfda820899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:72:15:48:d9:15:e2:46:82:80:7b:dc:0d:
                    ba:79:29:24:ff:ad:12:dd:96:ee:0e:d7:7f:c0:0d:
                    0e:ea:8a:7a:26:23:3a:e1:e1:ff:38:a5:1c:79:97:
                    c8:db:5c:2b:33:1f:9d:4b:3b:db:f8:9e:47:f3:c3:
                    18:0c:d9:27:a7:42:6c:28:b1:9f:1b:db:64:00:36:
                    f3:31:88:74:1f:49:e2:37:8b:8b:ec:16:cb:9b:b7:
                    13:5f:88:25:8c:ad:6b:4b:1a:c5:70:87:57:29:23:
                    90:0b:ba:38:5d:e2:c6:3e:69:90:79:a5:aa:88:11:
                    6a:cc:4f:96:c9:2c:4e:b4:6c:61:bc:43:05:f6:32:
                    8a:ed:c7:b8:79:75:2e:eb:30:ad:79:6c:67:04:d4:
                    f8:9f:62:c6:80:39:e1:91:95:af:e8:8c:94:2d:01:
                    3a:19:ed:5e:ab:af:8a:43:7d:94:f4:a5:7e:35:94:
                    27:7a:b9:61:11:6a:5c:75:d4:af:1f:99:1a:0e:64:
                    2c:f0:5b:46:2b:f5:2f:0a:7c:46:01:93:d4:fa:e4:
                    e8:0f:84:77:23:82:d2:0d:65:4c:44:ea:58:5d:b0:
                    ae:27:ff:c1:86:96:f1:5b:e9:df:53:38:5f:46:36:
                    8a:74:b8:4f:5a:4a:3e:16:91:6c:56:84:c6:53:d8:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:18:68:F5:1F:D0:96:5B:ED:94:C7:52:AC:7F:F4:D0:8A:A6:B0:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/eb5d0560-9867-31d1-88d6-790880839ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/6f57e016-3f00-4230-8751-484573ddf8de.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4A:AC:B4:CD:17:FC:FC:13:9D:45:27:73:67:CB:82:F6:62:48:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.92.0/24
                  66.43.96.0-66.43.98.255
                  66.43.101.0/24
                  66.43.105.0-66.43.106.255
                  66.43.110.0/24
                  66.43.112.0/21
                  69.28.96.0/19
                  69.168.192.0/19
                  69.170.160.0/19
                  74.85.0.0/19
                  207.232.80.0/20
                  209.141.64.0-209.141.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:d5:29:ff:d3:b7:00:88:2e:96:9d:3a:73:f3:b6:5a:c8:
         ee:f0:33:e0:a4:d9:c1:fe:32:9c:22:9b:6c:5a:10:15:a5:e8:
         09:16:88:28:a4:15:6b:69:17:34:c6:89:a0:50:7f:b4:9b:69:
         52:37:1d:55:51:c1:02:3e:34:c4:35:a2:43:b4:34:7a:bf:04:
         54:a8:05:7d:7c:ff:77:f0:9f:41:d2:70:2e:4d:01:ff:c4:28:
         fc:a9:eb:0c:cf:7b:cc:a8:25:be:7c:e4:61:31:0e:58:bc:69:
         2f:e5:13:a3:cb:22:3c:a8:76:ae:b9:fb:c1:c9:ca:f9:01:be:
         ab:9c:26:02:bc:be:75:df:0a:84:40:ea:c0:cc:8b:8e:b5:46:
         f6:88:16:e6:95:24:99:42:d1:46:98:b6:c1:68:fd:32:0a:8e:
         cb:19:78:2f:26:52:89:d7:0a:0d:24:d5:c7:b1:8f:a3:e1:82:
         05:ba:05:7a:3b:f6:df:34:ae:36:a9:48:bc:c2:1b:16:f1:72:
         77:5a:7d:21:20:01:0b:53:10:e3:a0:f5:c7:85:af:9b:e4:ae:
         0a:23:cc:2b:ac:cb:75:6a:ac:93:fe:73:18:1d:00:14:4b:60:
         94:28:86:7c:7b:ff:3a:ad:d5:7c:ad:22:3e:54:32:c1:27:a9:
         2f:f3:c9:0c
-----BEGIN CERTIFICATE-----
MIIGnTCCBYWgAwIBAgIUAQ0Mn0MoWDirGI4tlxh6Q/2IwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY1N2UwMTYtM2YwMC00MjMwLTg3NTEtNDg0NTczZGRm
OGRlMB4XDTIxMDExOTA1MDAwMFoXDTIzMDQyNDA0MDAwMFowLzEtMCsGA1UEAxMk
Y2Q5Nzg0MjctZmU2Mi00Yzc1LTkyNzItOTVjZmRhODIwODk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh75yFUjZFeJGgoB73A26eSkk/60S3ZbuDtd/
wA0O6op6JiM64eH/OKUceZfI21wrMx+dSzvb+J5H88MYDNknp0JsKLGfG9tkADbz
MYh0H0niN4uL7BbLm7cTX4gljK1rSxrFcIdXKSOQC7o4XeLGPmmQeaWqiBFqzE+W
ySxOtGxhvEMF9jKK7ce4eXUu6zCteWxnBNT4n2LGgDnhkZWv6IyULQE6Ge1eq6+K
Q32U9KV+NZQnerlhEWpcddSvH5kaDmQs8FtGK/UvCnxGAZPU+uToD4R3I4LSDWVM
ROpYXbCuJ//BhpbxW+nfUzhfRjaKdLhPWko+FpFsVoTGU9ha9wIDAQABo4IDrzCC
A6swHQYDVR0OBBYEFBkYaPUf0JZb7ZTHUqx/9NCKprBSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjU3
ZTAxNi0zZjAwLTQyMzAtODc1MS00ODQ1NzNkZGY4ZGUvZWI1ZDA1NjAtOTg2Ny0z
MWQxLTg4ZDYtNzkwODgwODM5ZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY1N2UwMTYtM2YwMC00MjMwLTg3
NTEtNDg0NTczZGRmOGRlLzZmNTdlMDE2LTNmMDAtNDIzMC04NzUxLTQ4NDU3M2Rk
ZjhkZS5jcmwwHwYDVR0jBBgwFoAUsEqstM0X/PwTnUUnc2fLgvZiSPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjU3ZTAxNi0zZjAwLTQyMzAtODc1MS00ODQ1
NzNkZGY4ZGUuY2VyMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAQitcMAwD
BAVCK2ADBABCK2IDBABCK2UwDAMEAEIraQMEAEIragMEAEIrbgMEA0IrcAMEBUUc
YAMEBUWowAMEBUWqoAMEBUpVAAMEBM/oUDAMAwQG0Y1AAwQE0Y1gMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
ADvK1Sn/07cAiC6WnTpz87ZayO7wM+Ck2cH+Mpwim2xaEBWl6AkWiCikFWtpFzTG
iaBQf7SbaVI3HVVRwQI+NMQ1okO0NHq/BFSoBX18/3fwn0HScC5NAf/EKPyp6wzP
e8yoJb585GExDli8aS/lE6PLIjyodq65+8HJyvkBvqucJgK8vnXfCoRA6sDMi461
RvaIFuaVJJlC0UaYtsFo/TIKjssZeC8mUonXCg0k1cexj6PhggW6BXo79t80rjap
SLzCGxbxcndafSEgAQtTEOOg9ceFr5vkrgojzCusy3VqrJP+cxgdABRLYJQohnx7
/zqt1XytIj5UMsEnqS/zyQw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:36 2023 by rpki-client on console-fra.rpki-client.org